Out-of-bounds Write Vulnerability in Intel Ethernet 700 Series Controllers
CVE-2021-0200

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Ethernet 700 Series Controllers
Vendor
CVE Published:
17 November 2021

What is CVE-2021-0200?

An out-of-bounds write vulnerability exists in the firmware for Intel Ethernet 700 Series Controllers prior to version 8.2. This vulnerability could allow a privileged user to potentially exploit the flaw to escalate privileges through local access, leading to unintended operations or unauthorized control over the device's functionalities.

Affected Version(s)

Intel(R) Ethernet 700 Series Controllers before version 8.2

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20211210-0004/
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.